Let’s Encrypt has recently started supporting validationmethods, which is why this started failing. Enabling ACME CAA Account and Method Binding
You need to have dns-01 specified. Note the dash, which your entry is missing.
14 Likes